Decel Xcoder, just looking for the next big thing. @Injection4Xcode@vivaldi.net
Italy (VT)
Joined May 2012
- Tweets19.3K
- Following213
- Followers2K
- Likes9.6K
Injection for Xcode retweeted
"We're donating Fable 5.5..."
Oh, never mind. They're just donating some Agent Skills.
We're donating Agent Skills to the Agentic AI Foundation (@AgenticAIFdn), the same foundation we donated MCP to.
Since December 2025, 70+ agent platforms have integrated the standard, including ChatGPT, Cursor, GitHub Copilot, and VS Code.
Here's what that means for you:
Injection for Xcode retweeted
"Donald Trump has abandoned the Western order, turning America into a Russian ally," per the Atlantic
Injection for Xcode retweeted
Democrats have filed a lawsuit against Trump and the Trump Justice Department — alleging that the administration is unlawfully interfering with the midterms by pressuring states to remove voters from their rolls. NBC
Injection for Xcode retweeted
BREAKING: Facebook executives say if the California wealth tax passes they’re going to ruin teen girls' mental health, steal all our data, and sell political ads to America's foreign adversaries who want to instigate another civil war even harder next year.
Injection for Xcode retweeted
Oh this is FUCKING Delicious.
BREAKING: President Trump must sit for a deposition in his defamation lawsuit against the BBC by Dec. 11, a judge orders. apnews.com/article/trump-bbc…
Injection for Xcode retweeted
Remission may not be enough to prevent disease progression. Histologic activity can persist and significantly increase the risk of relapse. How can a more comprehensive approach to CD care by incorporating histology improve your patients’ long-term outcomes?
Injection for Xcode retweeted
Papers rejected by Nature:
1933 · Fermi’s theory of beta decay (“too remote from reality”)
1937 · Krebs’ citric acid cycle (Nobel Prize, 1953)
1973 · Lauterbur’s first MRI paper (Nobel Prize, 2003)
Injection for Xcode retweeted
From @TheAthletic: J.J. Watt has been installed as CBS’s permanent No. 1 NFL game analyst in a multi-year deal, the network announced Thursday. Watt was thrust into the role this fall as a fill-in for Tony Romo. nyti.ms/3UGXyUv
Injection for Xcode retweeted
The constellation in Van Gogh’s The Starry Night may be based on a real cluster of stars in the Taurus constellation. Researchers make a compelling case with evidence from astronomy, weather analysis and Van Gogh’s letters.
sciam.com/article/astronomer…
Injection for Xcode retweeted
This too?
(1993)
Soft Currency Economics - Mosler Economics / Modern Monetary TheoryMosler Economics / Modern Monetary Theory
;)
Injection for Xcode retweeted
@blknoiz06 it remains you , remains God .
solana:9cRCn9rGT8V2imeM2BaKs13yhMEais3ruM3rPvTGpump
Injection for Xcode retweeted
1/243 = 0.004 115 226 337 448 559 670 781 893 004 …
Read it three digits at a time and it climbs a staircase. Each term adds 111, which is why 11, 22, 33, 44, 55 keep appearing: 115 = 111 + 4, 448 = 444 + 4.
Exactly:
1/243 = Σ (111k − 107)/1000ᵏ
The tenth term, 1003, spills a carry back, turning 892 into 893.
The cycle lasts 27 digits because 243 divides 10²⁷ − 1, the same modular arithmetic behind check digits and cryptography.
A fraction is a machine that never stops counting.
Injection for Xcode retweeted
漏洞之众兮列如麻，补丁纷纷兮来不下（
印度某CA，发明项目：用"4"当CA证书私钥
PHP，发明项目：从5.4开始的全版本高危漏洞，CVE-2026-109618 内存耗尽（OOM）腐败导致代码执行、CVE-2026-109619 全局状态残留（Stale Global State）导致代码执行，更新后cve-2026-109618 POC 在 php8.2.35 和 8.5.12 上依旧可用
NodeJS，发明项目：Brotli解码器越界写入，可执行远程代码
Golang，发明项目：标准库加密库证书校验不严格，不执行实时证书吊销，新版本解决方法是硬编码黑名单（我看了都绷不住了）
LiteLLM，发明项目：维护者账号被攻破，供应链投毒发布含盗取用户数据的恶意版本
nginx，发明项目：安全公告一口气挂了 5 颗新 CVE（均在 1.31.7+ 修复）——CVE-2026-15176 alias+rewrite 缓冲区溢出、CVE-2026-93479 脚本求值缓冲区溢出、CVE-2026-95101 HTTP/3 请求体注入、CVE-2026-97629 TLS session ticket 伪造、CVE-2026-97205 异步 AIO use-after-free；往前还有 CVE-2026-42533 map+regex 缓冲区溢出（severity: major），反向代理入口主打一个"漏洞全家桶"
Ruby，发明项目：resolv 多重漏洞 CVE-2026-80212 和 CVE-2026-80213（2026-08-27）、getaddrinfo 超时处理器 use-after-free CVE-2026-46727（2026-05-20）、ERB 反序列化守卫绕过 CVE-2026-41316（2026-04-21）、Zlib::GzipReader 缓冲区溢出 CVE-2026-27820（2026-03-05），工具链全年无休
Docker 29，发明项目：29.9.2（10/20发布）更新 Go runtime 修复 CVE-2026-111943——eMudhra 八个中间 CA（G3B/G3C 系列）私钥已泄露，镜像 pull/push 的 TLS 证书验证会拒绝依赖这些中间体的注册表证书链，主打一个"拉个镜像都拉不动"
Python（certifi），发明项目：10月18日紧急移除 emSign CA 根证书（commit 5cb238ca），10月20日又恢复了不受影响的 emSign 根证书（commit 662df63d），根证书库被动大手术——与 Rust rustls、Docker 29、Go crypto/x509 同属 eMudhra/emSign 私钥泄露连锁反应，主打一个"信任锚全链路崩塌"
ASP.NET Core，发明项目：远程代码执行（CVE-2026-102870）外加三连拒绝服务——算法复杂度低效（CVSSv4 8.2）、资源分配无限制（CVSSv4 8.7）、越界写入（CVSSv4 8.7），CVSSv4 全是 8 字头，主打一个全方位瘫痪
.NET，发明项目：本地用户靠链接跟随一路跟到 root（CVSSv4 8.5），再附赠通用拒绝服务 CVE-2026-58280，提权宕机一条龙
Traefik（Kubernetes Ingress NGINX provider），发明项目：mTLS 客户端认证绕过（CVSSv4 9.3，严重），同一主机多个 Ingress 声明路径时 TLS 选项 fail-open 直接回退到不要求客户端证书的默认配置，外加跨命名空间授权绕过（CVSSv4 2.1），把"故障开放"四个字演绎得淋漓尽致（安全公告 SB2026102197）
Oracle Java SE，发明项目：2026年10月 CPU 单季 55 颗 CVE 创历史新高，其中 49 颗无需网络认证即可远程代码执行；JavaFX WebKitGTK 可被彻底接管（CVE-2026-43660，CVSS 7.5）、核心类库可非法读取或篡改敏感数据（CVE-2026-101516，CVSS 6.5）、编译器可被 DoS 到反复崩溃（CVE-2026-101737）、snappy-java 构造恶意字节流一口气吞掉 2GB 内存 OOM（CVE-2026-108106，CVSS 7.5）
Apache Tomcat，发明项目：JNDI Realm 配置使用非 GSSAPI 的 SASL 认证机制时认证步骤直接缺失（CVE-2026-101296），不输密码也能通过认证，主打一个"欢迎光临"
Rust（rustls），发明项目：证书校验可能接受不受信任的 emSign 中间公钥的证书路径（CVE-2026-111943 / RUSTSEC-2026-0382），而这些中间密钥对应的私钥目前是已知的——等于信任锚放行了"私钥已外泄"的中间证书，主打一个"装了TLS也白装"；0.103.16 与 0.104.0-alpha.8 起拒绝此类路径
早苗发布推文，建议尽快更新 PHP 到最新版本（早苗个人主页被攻破sanae.gr.jp/）
takaichi_sanae/status/2112890642590564386
另外，据传说 PHP 的上游补丁本身也被入侵
Injection for Xcode retweeted
Every minute matters when wildfires strike. In Greece, sensors, 5G, drones and AI help teams detect potential fires early and respond faster to protect forests and communities.
Discover more TECH4ALL initiatives at HUAWEI CONNECT 2026 in Florence!
